What’s Vulnerable › Products

tukaani-project xz vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your tukaani-project xz version is affected

Latest tukaani-project xz vulnerabilities

• CVE-2026-34743 — XZ Utils: Buffer overflow in lzma_index_append() (CVSS 5.3)
• CVE-2025-31115 — XZ has a heap-use-after-free bug in threaded .xz decoder (CVSS 8.7)
• CVE-2024-47611 — XZ Utils on Microsoft Windows platform are vulnerable to argument injection (CVSS 6.3)
• CVE-2024-3094 — Xz: malicious code in distributed source (CVSS 10.0)
• CVE-2020-22916 — (CVSS 5.5)
• CVE-2022-1271 — (CVSS 8.8)
• CVE-2015-4035 — (CVSS 7.8)